Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/jG_yZEDcBrJFZrVkLllU3o8YFJk.roa
File: jG_yZEDcBrJFZrVkLllU3o8YFJk.roa (raw, json)
Hash identifier: xSzZOO/fM3CRK2GvnGEN+Mp6WNil9NrvHDFjtZI1SM0=
Subject key identifier: 8C:6F:F2:64:40:DC:06:B2:45:66:B5:64:2E:59:54:DE:8F:18:14:99
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01867B72F6EF981390FE324E39337D146AF8
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/jG_yZEDcBrJFZrVkLllU3o8YFJk.roa
Signing time: Wed 22 Feb 2023 23:26:17 +0000
ROA not before: Wed 22 Feb 2023 23:26:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 31.40.196.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
212.107.4.0/22 maxlen: 22
188.119.68.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 23 Mar 2023 13:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7b:72:f6:ef:98:13:90:fe:32:4e:39:33:7d:14:6a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Feb 22 23:26:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c6ff26440dc06b24566b5642e5954de8f181499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:1e:4b:12:21:9c:f5:69:69:cb:2b:9e:45:
10:67:74:ff:87:e4:f4:7e:f6:6e:20:6a:88:42:4e:
f3:a6:48:de:c9:67:38:e3:2d:5e:5e:74:fc:f4:a2:
55:8f:e7:ff:a5:93:36:c4:82:08:9e:eb:40:8e:d9:
e3:e9:b2:19:6c:ca:12:45:33:db:e2:d5:c1:b9:30:
69:d3:d6:53:b6:9d:8c:70:45:05:a6:9e:74:79:a0:
43:69:56:77:4e:6c:7e:c9:4a:d1:39:db:a9:03:00:
d8:a2:28:64:0f:4e:36:25:23:73:4b:57:25:f7:d9:
40:16:46:29:00:c6:10:87:0c:5b:20:33:e0:d1:db:
86:7e:6b:9b:96:61:08:da:f8:a4:44:6b:2f:af:9c:
c8:f0:22:d6:31:c4:7a:2f:6c:0e:34:1e:1f:ed:00:
64:dc:1b:aa:25:01:b0:00:15:60:19:e8:f0:58:db:
86:e0:54:0b:a9:69:9c:f8:aa:45:7b:37:11:68:5e:
8e:33:bc:b1:87:12:67:34:48:c3:39:d5:2d:b3:2b:
be:c7:53:93:ac:fc:8a:13:ef:9c:4f:d5:a1:12:ab:
5d:72:51:52:81:04:14:0d:30:d7:2d:0c:ef:af:60:
64:7d:c4:a8:45:00:8a:bb:d3:9a:63:b8:db:98:e1:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6F:F2:64:40:DC:06:B2:45:66:B5:64:2E:59:54:DE:8F:18:14:99
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/jG_yZEDcBrJFZrVkLllU3o8YFJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/22
85.8.144.0/22
188.119.68.0/22
212.107.4.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:f9:bb:72:b2:01:be:e6:4e:ad:e3:0e:01:02:1a:da:f6:1f:
39:96:2f:24:9e:d9:59:08:cd:68:e9:16:33:09:d9:d2:ae:76:
b2:c6:08:19:ba:3f:0c:b0:fc:c6:bd:24:38:90:30:87:b3:52:
0a:01:bb:eb:d1:2c:dd:11:70:f9:a9:91:7a:5a:2b:aa:15:9a:
39:81:ac:76:e2:3a:7a:fc:bf:16:6c:55:a1:96:ba:72:e1:aa:
08:56:e2:bc:9a:ad:24:f3:b3:a4:0d:73:0f:f1:d6:74:a2:a0:
0e:f6:a1:f7:6f:57:ed:af:36:e1:f3:f4:7e:a0:6e:41:73:5b:
8a:ac:f7:06:c5:1f:5b:76:33:d2:b3:9e:b6:9b:be:49:a8:51:
46:3b:a5:02:0e:19:18:8a:df:95:61:95:76:f9:38:1a:09:01:
c8:51:39:51:0d:0c:b6:6f:cd:e2:af:c9:85:0f:73:53:81:5d:
a3:40:e2:a7:0a:68:52:6f:2e:22:45:2d:65:fe:15:e7:fc:9d:
5a:fb:47:28:17:d6:8f:3e:4d:b7:d9:b7:6e:33:3d:e3:bc:7f:
b3:b4:a8:98:6f:fc:a9:91:f2:81:21:24:be:b0:8e:f6:cf:f5:
44:75:76:3b:88:29:0c:85:e0:95:df:b1:0d:39:ec:40:56:b2:
a0:9f:92:2b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYZ7cvbvmBOQ/jJOOTN9FGr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjMwMjIyMjMyNjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzZmZjI2NDQwZGMwNmIyNDU2NmI1NjQyZTU5NTRkZThmMTgxNDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkweSxIhnPVpacsrnkUQZ3T/h+T0
fvZuIGqIQk7zpkjeyWc44y1eXnT89KJVj+f/pZM2xIIInutAjtnj6bIZbMoSRTPb
4tXBuTBp09ZTtp2McEUFpp50eaBDaVZ3Tmx+yUrROdupAwDYoihkD042JSNzS1cl
99lAFkYpAMYQhwxbIDPg0duGfmublmEI2vikRGsvr5zI8CLWMcR6L2wONB4f7QBk
3BuqJQGwABVgGejwWNuG4FQLqWmc+KpFezcRaF6OM7yxhxJnNEjDOdUtsyu+x1OT
rPyKE++cT9WhEqtdclFSgQQUDTDXLQzvr2BkfcSoRQCKu9OaY7jbmOEvCwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIxv8mRA3AayRWa1ZC5ZVN6PGBSZMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvakdfeVpFRGNCckpGWnJWa0xsbFUzbzhZRkprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCHyjEAwQC
VQiQAwQCvHdEAwQC1GsEAwQC1HNkMA0GCSqGSIb3DQEBCwUAA4IBAQC1+btysgG+
5k6t4w4BAhra9h85li8kntlZCM1o6RYzCdnSrnayxggZuj8MsPzGvSQ4kDCHs1IK
Abvr0SzdEXD5qZF6WiuqFZo5gax24jp6/L8WbFWhlrpy4aoIVuK8mq0k87OkDXMP
8dZ0oqAO9qH3b1ftrzbh8/R+oG5Bc1uKrPcGxR9bdjPSs562m75JqFFGO6UCDhkY
it+VYZV2+TgaCQHIUTlRDQy2b83ir8mFD3NTgV2jQOKnCmhSby4iRS1l/hXn/J1a
+0coF9aPPk232bduMz3jvH+ztKiYb/ypkfKBISS+sI72z/VEdXY7iCkMheCV37EN
OexAVrKgn5Ir
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:50 2024 by rpki-client on console-fra.rpki-client.org